From fe46489b1d360738aecf298f7653b46ea7a3d0ce Mon Sep 17 00:00:00 2001
From: Jon Chiappetta <root@fossjon.com>
Date: Mon, 3 Nov 2025 21:35:48 -0500
Subject: [PATCH] Free Null

---
 src/openvpn/ssl.c | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/openvpn/ssl.c b/src/openvpn/ssl.c
index 85016937b4d..9ca44672e9e 100644
--- a/src/openvpn/ssl.c
+++ b/src/openvpn/ssl.c
@@ -1020,7 +1020,14 @@ tls_session_init(struct tls_multi *multi, struct tls_session *session)
     /* load most recent packet-id to replay protect on --tls-auth */
     packet_id_persist_load_obj(session->tls_wrap.opt.pid_persist, &session->tls_wrap.opt.packet_id);
 
-    key_state_init(session, &session->key[KS_PRIMARY]);
+    for (size_t i = 0; i < KS_SIZE; ++i)
+    {
+        key_state_init(session, &session->key[i]);
+        if (i != KS_PRIMARY)
+        {
+            session->key[i].state = S_UNDEF;
+        }
+    }
 
     dmsg(D_TLS_DEBUG, "TLS: tls_session_init: new session object, sid=%s",
          session_id_print(&session->session_id, &gc));